Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52927: netfilter: allow exp not to be removed in nfctfindexpectation bsc1239644. CVE-2024-35910: tcp: properly terminate timers for kernel sockets bsc1224489...

The vulnerability of the taprio_dump() function in the net/sched/sch_taprio.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tapriodump function in the net/sched/schtaprio.c module of the Linux operating system’s kernel is related to the repeated use of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: sched: using the RCU read-side critical section in tapriodump Fixed a possible use-after-free in ‘tapriodump’ by adding the RCU read-side critical section. This issue was not encountered on x86, but was found on an arm64...

net: sched: use RCU read-side critical section in taprio_dump()

...

SUSE CVE-2024-50126

In the Linux kernel, the following vulnerability has been resolved: net: sched: use RCU read-side critical section in tapriodump Fix possible use-after-free in 'tapriodump' by adding RCU read-side critical section there. Never seen on x86 but found on a KASAN-enabled arm64 system when investigati...

DEBIAN-CVE-2024-50126

In the Linux kernel, the following vulnerability has been resolved: net: sched: use RCU read-side critical section in tapriodump Fix possible use-after-free in 'tapriodump' by adding RCU read-side critical section there. Never seen on x86 but found on a KASAN-enabled arm64 system when investigati...

AZL-52514 CVE-2024-50126 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: net: sched: use RCU read-side critical section in tapriodump Fix possible use-after-free in 'tapriodump' by adding RCU read-side critical section there. Never seen on x86 but found on a KASAN-enabled arm64 system when investigati...